🚀 kresus

kubernetes/apps/default/cloudnative-pg/cluster/backups/external-backup.yaml

@@ -20,7 +20,7 @@ spec:
                 - name: POSTGRES_HOST
                   value: ${POSTGRES_HOST}
                 - name: POSTGRES_DB
-                  value: "authelia,bazarr,firefly-iii,freshrss,gatus,ghostfolio,immich,invidious,joplin,lldap,lychee,outline,paperless,prowlarr_main,pushover-notifier,radarr_main,semaphore,sharry,tandoor,vaultwarden,vikunja,wallabag"
+                  value: "authelia,bazarr,freshrss,gatus,ghostfolio,kresus,immich,invidious,joplin,lldap,lychee,outline,paperless,prowlarr_main,pushover-notifier,radarr_main,semaphore,sharry,tandoor,vaultwarden,vikunja,wallabag"
                 - name: POSTGRES_USER
                   valueFrom:
                     secretKeyRef:

kubernetes/apps/default/kresus/app/externalsecret.yaml

@@ -3,26 +3,27 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: firefly-iii
+  name: kresus
   namespace: default
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: onepassword-connect
   target:
-    name: firefly-iii-secret
+    name: kresus-secret
     creationPolicy: Owner
     template:
       engineVersion: v2
       data:
         # App
-        APP_KEY: "{{ .FIREFLY_APP_KEY }}"
+        KRESUS_DB_HOST: &dbHost postgres-rw.default.svc.cluster.local
-        DB_USERNAME: &dbUser "{{ .POSTGRES_USERNAME }}"
+        KRESUS_DB_USERNAME: &dbUser "{{ .POSTGRES_USERNAME }}"
-        DB_PASSWORD: &dbPass "{{ .POSTGRES_PASSWORD }}"
+        KRESUS_DB_PASSWORD: &dbPass "{{ .POSTGRES_PASSWORD }}"
-        FIREFLY_III_ACCESS_TOKEN: "{{ .FIREFLY_ACCESS_TOKEN }}"
+        KRESUS_DB_NAME: &dbName kresus
+        KRESUS_SALT: "{{ .KRESUS_SALT }}"
         # Postgres Init
-        INIT_POSTGRES_DBNAME: firefly-iii
+        INIT_POSTGRES_DBNAME: *dbName
-        INIT_POSTGRES_HOST: postgres-rw.default.svc.cluster.local
+        INIT_POSTGRES_HOST: *dbHost
         INIT_POSTGRES_USER: *dbUser
         INIT_POSTGRES_PASS: *dbPass
         INIT_POSTGRES_SUPER_PASS: "{{ .POSTGRES_SUPER_PASS }}"
@@ -31,4 +32,4 @@ spec:
     - extract:
         key: cloudnative-pg
     - extract:
-        key: firefly-iii
+        key: kresus

kubernetes/apps/default/kresus/app/gatus.yaml

@@ -2,16 +2,16 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: firefly-iii-gatus-ep
+  name: kresus-gatus-ep
   namespace: default
   labels:
     gatus.io/enabled: "true"
 data:
   config.yaml: |
     endpoints:
-      - name: firefly-iii
+      - name: kresus
         group: internal
-        url: https://cash.${SECRET_CLUSTER_DOMAIN}/login
+        url: https://cash.${SECRET_CLUSTER_DOMAIN}
         interval: 1m
         client:
           insecure: true

kubernetes/apps/default/kresus/app/helmrelease.yaml

@@ -3,7 +3,7 @@
 apiVersion: helm.toolkit.fluxcd.io/v2beta1
 kind: HelmRelease
 metadata:
-  name: &app firefly-iii
+  name: &app kresus
   namespace: default
 spec:
   interval: 30m
@@ -31,45 +31,57 @@ spec:
       01-init-db:
         image: ghcr.io/auricom/postgres-init:15.4
         imagePullPolicy: IfNotPresent
-        envFrom: &envFrom
+        envFrom:
           - secretRef:
-              name: firefly-iii-secret
+              name: kresus-secret
     controller:
       annotations:
         reloader.stakater.com/auto: "true"
     image:
-      repository: fireflyiii/core
+      repository: ghcr.io/auricom/kresus
-      tag: version-6.0.8
+      tag: 0.19.4@sha256:42ca12c7d05496051d225b5417956569dfcfe631b1a65865dc122ed3b2c2b3ca
+      imagePullPolicy: IfNotPresent
     service:
       main:
         ports:
           http:
-            port: 8080
+            port: 9876
     env:
-      TZ: ${TIMEZONE}
+      HOST: 0.0.0.0
-      APP_URL: "https://cash.${SECRET_DOMAIN}"
+      PORT: 9876
-      DB_CONNECTION: "pgsql"
+      LC_ALL: C.UTF-8
-      DB_HOST: postgres-rw.default.svc.cluster.local
+      LANG: C.UTF-8
-      DB_PORT: "5432"
+      KRESUS_DB_TYPE: postgres
-      DB_DATABASE: *app
+      KRESUS_DIR: /config
-      MAIL_MAILER: log
+      KRESUS_EMAIL_HOST: mailrise.default.svc.cluster.local
-      TRUSTED_PROXIES: "**"
+      KRESUS_EMAIL_PORT: 8025
-      SEND_REGISTRATION_MAIL: false
+      KRESUS_EMAIL_TRANSPORT: smtp
-      SEND_ERROR_MESSAGE: false
+      KRESUS_EMAIL_FROM: kresus@mailrise.home.arpa
-      SEND_LOGIN_NEW_IP_WARNING: false
+      KRESUS_PYTHON_EXEC: python3
+      NODE_ENV: production
     envFrom:
       - secretRef:
-          name: firefly-iii-secret
+          name: kresus-secret
     persistence:
       config:
         enabled: true
-        existingClaim: firefly-iii-config
+        existingClaim: kresus-config
-        mountPath: /var/www/html/firefly-iii/storage/upload
+        mountPath: /config
+      woob:
+        enabled: true
+        type: emptyDir
+        mountPath: /mnt/woob
+    podSecurityContext:
+      runAsUser: 568
+      runAsGroup: 568
+      fsGroup: 568
+      fsGroupChangePolicy: "OnRootMismatch"
     ingress:
       main:
         enabled: true
         ingressClassName: "nginx"
         annotations:
+          auth.home.arpa/enabled: "true"
           hajimari.io/icon: mdi:cash
         hosts:
           - host: &host "cash.${SECRET_CLUSTER_DOMAIN}"

kubernetes/apps/default/kresus/app/volsync.yaml

@@ -3,19 +3,19 @@
 apiVersion: external-secrets.io/v1beta1
 kind: ExternalSecret
 metadata:
-  name: firefly-iii-restic
+  name: kresus-restic
   namespace: default
 spec:
   secretStoreRef:
     kind: ClusterSecretStore
     name: onepassword-connect
   target:
-    name: firefly-iii-restic-secret
+    name: kresus-restic-secret
     creationPolicy: Owner
     template:
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/firefly-iii'
+        RESTIC_REPOSITORY: '{{ .REPOSITORY_TEMPLATE }}/kresus'
         RESTIC_PASSWORD: '{{ .RESTIC_PASSWORD }}'
         AWS_ACCESS_KEY_ID: '{{ .AWS_ACCESS_KEY_ID }}'
         AWS_SECRET_ACCESS_KEY: '{{ .AWS_SECRET_ACCESS_KEY }}'
@@ -27,16 +27,16 @@ spec:
 apiVersion: volsync.backube/v1alpha1
 kind: ReplicationSource
 metadata:
-  name: firefly-iii
+  name: kresus
   namespace: default
 spec:
-  sourcePVC: firefly-iii-config
+  sourcePVC: kresus-config
   trigger:
     schedule: "0 7 * * *"
   restic:
     copyMethod: Snapshot
     pruneIntervalDays: 7
-    repository: firefly-iii-restic-secret
+    repository: kresus-restic-secret
     cacheCapacity: 10Gi
     volumeSnapshotClassName: csi-ceph-blockpool
     storageClassName: rook-ceph-block

kubernetes/apps/default/kresus/app/volume.yaml

@@ -2,10 +2,10 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: firefly-iii-config
+  name: kresus-config
   namespace: default
   labels:
-    app.kubernetes.io/name: &name firefly-iii
+    app.kubernetes.io/name: &name kresus
     app.kubernetes.io/instance: *name
     snapshot.home.arpa/enabled: "true"
 spec:

kubernetes/apps/default/kresus/ks.yaml

@@ -3,12 +3,12 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: cluster-apps-firefly-iii
+  name: cluster-apps-kresus
   namespace: flux-system
   labels:
     substitution.flux.home.arpa/enabled: "true"
 spec:
-  path: ./kubernetes/apps/default/firefly-iii/app
+  path: ./kubernetes/apps/default/kresus/app
   prune: true
   sourceRef:
     kind: GitRepository
@@ -20,7 +20,7 @@ spec:
   healthChecks:
     - apiVersion: helm.toolkit.fluxcd.io/v2beta1
       kind: HelmRelease
-      name: firefly-iii
+      name: kresus
       namespace: default
   interval: 30m
   retryInterval: 1m

kubernetes/apps/default/kustomization.yaml

@@ -12,7 +12,6 @@ resources:
   - ./calibre/ks.yaml
   - ./cloudnative-pg/ks.yaml
   - ./emqx/ks.yaml
-  - ./firefly-iii/ks.yaml
   - ./flood/ks.yaml
   - ./freshrss/ks.yaml
   - ./frigate/ks.yaml
@@ -25,6 +24,7 @@ resources:
   - ./joplin/ks.yaml
   - ./komf/ks.yaml
   - ./komga/ks.yaml
+  - ./kresus/ks.yaml
   - ./kubernetes-schemas/ks.yaml
   - ./lidarr/ks.yaml
   - ./libreddit/ks.yaml

kubernetes/apps/default/mailrise/app/mailrise.yaml

@@ -5,3 +5,8 @@ configs:
       title_template: "TRUENAS"
     urls:
       - !env_var PUSHOVER_TRUENAS
+  kresus@mailrise.home.arpa:
+    mailrise:
+      title_template: "KRESUS"
+    urls:
+      - !env_var PUSHOVER_KRESUS